release: WRNexusJS 0.8.0
This commit is contained in:
+12
@@ -0,0 +1,12 @@
|
||||
# Security policy
|
||||
|
||||
Security fixes are provided for the latest published WRNexusJS minor release. Keep every
|
||||
`@wrnexus/*` package on the same version and run `wrnexus update` before reporting an issue.
|
||||
|
||||
Do not open a public issue for a suspected vulnerability. Use the repository's private security
|
||||
reporting channel and include the affected package/version, reproduction, impact, and suggested
|
||||
mitigation. Never include production credentials or personal data.
|
||||
|
||||
Deployments must use HTTPS, keep secrets outside source control, configure trusted proxies and
|
||||
origins explicitly, and review the package security notes for auth, CAPTCHA, encryption, uploads,
|
||||
OAuth, JWT, and database adapters.
|
||||
Reference in New Issue
Block a user